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VIA U.S. MAIL 

Undersecretary John Chapman 
Consumer Affairs and Business Regulation 
Ten Park Plaza, Suite 5170 
Boston, MA 02116 

Re: Notice of Data Event 

Dear Mr Chapman: 

We represent Donald H. Read, Attorney at Law, 982 Santa Barbara Road, Berkeley, 
California, 94707, and are writing to notify you of a data security incident that may affect 
the security of the personal information of one (1) Massachusetts resident. The 
investigation into this event is ongoing, and this notice will be supplemented with any new 
significant facts learned subsequent to its submission. By providing this notice, Donald H. 
Read does not waive any rights or defenses regarding the applicability of Massachusetts 
law or personal jurisdiction. 


Nature of the Data Security Event 

On July 27, 2015 unknown individuals broke into Mr. Read’s home and his home office and 
stole, among other things, a laptop containing client files. Local law enforcement was 
immediately notified following the discovery of the break in and theft of his laptop. Law 
enforcement’s investigation is ongoing. While it does not appear that the laptop, or the 
data it contains, was specifically targeted, the stolen laptop contained one or more files 
with the names, Social Security numbers and bank or financial account information of Mr. 
Read's clients, including one (1) Massachusetts resident. To the best of his knowledge, 
Mr. Read’s files do not contain any related security code, access code or password. 
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Notice to Massachusetts Residents 

On September 8, 2015, Mr. Read began providing written notice to potentially affected 
individuals, including the one (1) Massachusetts resident, about this incident and the steps 
they can take to protect themselves. Written notice was provided in substantially the same 
form as the letters attached here as Exhibit A. 

Other Steps Taken and To Be Taken 

Mr. Read takes this matter, and the security of the personal information in his care, 
seriously. In addition to providing written notice of this incident to affected individuals as 
described above, each affected individual, including the one (1) Massachusetts resident, 
being offered access to one free year of monitoring and fraud resolution services provided 
through Kroii. Mr. Read is providing each affected individual with information on how to 
protect against identity theft and fraud. Further, Mr. Read is providing written notice of this 
incident to the other state regulators where required. 

Contact information 

Should you have any questions regarding this notification or other aspects of the data 
security event, please contact us at 215-977-4058. 


Very truly yours, 


James E. Prendergast of 

LEWIS BRISBOIS BISGAARD & SMITH LLP 

JEP:im 
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EXHIBIT A 




Donald H. Read 

Attorney at Law - Certified Tax Law Specialist 


«MemberFirstName» «Memb(jrLastName» «NameSuffix» «Date» (Format Month Day, Year) 

«Address1» 

«Address2» 

«City», «State» «Zip Code» 


Dear «MemberFirstName» «MemberLastName», 

I am writing to let you know of an incident that may affect the security of certain personal information relating to you and 
guidance on how you can protect yourself against the misuse of your personal information, should you feel it is necessary 
to do so. 

To help relieve concerns and restore confidence following this incident, we have secured the services of Kroll to provide 
identity theft protection at no cost to you for 1 year. Kroll is a global leader in risk mitigation and response, and their team 
has extensive experience helping people who have sustained an unintentional exposure of confidential data. 

Your identity theft protection services include Credit Monitoring and Identity Theft Consultation and Restoration. Additional 
information describing your services is included with this letter. 

H 

' Visit krollbreach.idMonitoringService.com and follow the online instructions 
to take advantage of your Identity Theft Protection Services. 

Membership Number: «Member ID» 


Under Massachusetts law, you have the right to obtain any police report filed in regard to this incident. If you are the victim 
of identity theft, you also have the right to file a police report and obtain a copy of it. 


To further protect against possible identity theft or other financial loss, we encourage you to remain vigilant, to review your 
account statements, and to monitor your credit reports. Specific steps you can take to protect against the possibility of 
identity theft include closely monitoring your financial statements for any unusual activity and monitoring your credit reports. 
Under U.S. law, you are entitled to one free credit report annually from each of the three major credit bureaus. To order your 
free credit report, visit www.annualcreditreport.com, or call, toll-free, (877) 322-8228. 

Under Massachusetts law, consumers may place a security freeze on their credit reports. A security freeze prohibits a credit 
reporting agency from releasing any information from a consumer’s credit report without the consumer’s written authorization. 
However, please be advised that placing a security freeze on your credit report may delay, interfere with, or prevent the timely 
approval of any requests you make for new loans, credit mortgages, employment, housing, or other services. 

If you have been a victim of identity theft, and you provide the credit reporting agency with a valid police report, it cannot 
charge you to place, lift or remove a security freeze. In all other cases, a credit reporting agency may charge you up to 
$5.00 each to place, temporarily lift, or permanently remove a security freeze. 


To place a security freeze on your credit report, you must send a written request to each of the three major consumer reporting 
agencies: Equifax (www.equifax.com), Experian (www.experian.com), and TransUnion (www.transunion.com) by regular, 
certified or overnight mail to the addresses below: 


Equifax 

P.O. Box 105788 
Atlanta, GA 30348 
800-525-6285 
www.equifax.com 


Experian 
P.O. Box 9554 
Allen, TX 75013 
888-397-3742 
www.experian.com 


TransUnion 
P.O. Box 2000 
Chester, PA 19022-2000 
800-680-7289 
www.transunion.com 
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In order to request a security freeze, you will need to provide the following information: 

1. Your full name (including middle initial as well as Jr., Sr., II, III, etc.); 

2 . Social Security number; 

3. Date of birth; 

4. If you have moved in the past five (5) years, provide the addresses where you have live over the prior five years; 

5. Proof of current address, such as a current utility bill or telephone bill; 

6. A legible photocopy of a government-issued identification card (state driver’s license or ID card, military identification, 
etc.); 

7 . If you are a victim of identity theft, include a copy of either the police report, investigative report, or complaint to a law 
enforcement agency concerning identity theft; 

8. If you are not a victim of identity theft, include payment by check, money order, or credit card (Visa, MasterCard, 
American Express or Discover only). Do not send cash through the mail. 

The credit reporting agencies have three (3) business days after receiving your request to place a security freeze on your 
credit file report. The credit bureaus must also send written confirmation to you within five (5) business days and provide 
you with a unique personal identification number (PIN) or password, or both, that can be used by you to authorize the 
removal or lifting of the security freeze. 

To lift the security freeze in order to allow a specific entity or individual access to your credit report, you must call or send a 
written request to the credit reporting agencies by mail and include proper identification (name, address, and Social Security 
number) and the PIN number or password provided to you when you placed the security freeze, as well as the identities of 
those entities or individuals you would like to receive your credit report or the specific period of time you want the credit report 
available. The credit reporting agencies have three (3) business days after receiving your request to remove the security freeze. 

To further educate yourself regarding identity theft and the steps you can take to avoid identity theft, you may contact the 
Federal Trade Commission. They can be reached at: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, 
DC 20580, or at www.ftc.gov/idtheft, 1-877-ID-THEFT (1-877-438-4338; TTY: 1-866-653-4261). The Federal Trade Commission 
also encourages those who discover that their information has been misused to file a complaint with them. The Massachusetts 
Attorney General may also have advice on preventing identity theft. 

The security of the personal information in my care is one of my highest priorities. I am sorry for the inconvenience this incident 
may cause you. Call 1-866-775-4209, 8 a.m. to 5 p.m. (Central Time), Monday through Friday. Kroil’s licensed investigators are 
standing by to answer your questions or help you with concerns you may have. Please have your membership number ready. 

Sincerely, 

'Donald r?/ /Read 

Donald H. Read 

krollbreach.idMonitoringService.com is only compatible with the current version or one version earlier of Internet Explorer, Chrome, Firefox, and Safari. 
To receive credit services, you must be over the age of 18 and have established credit in the U.S., have a Social Security number in your name, 
and have a US. residential address associated with your credit file. To receive credit services by mail instead of online, please call 1-844-263-8605. 





